mail vulnerabilities and fixes

Recent CVEs affecting mail, with upgrade or downgrade steps. 13 tracked.

mail has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2025-12-05. Highest priority: CVE-2021-32652 (score 52/100).

• CVE-2025-66514 LOW 3.5 UPGRADE Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform
• CVE-2024-52509 LOW 3.5 UPGRADE Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform
• CVE-2024-52508 HIGH 8.2 UPGRADE Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform
• CVE-2023-48307 LOW 3.5 UPGRADE Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform
• CVE-2023-45660 MEDIUM 4.3 UPGRADE Nextcloud mail is an email app for the Nextcloud home server platform
• CVE-2023-33184 LOW 3.5 UPGRADE Nextcloud Mail is a mail app in Nextcloud
• CVE-2023-25160 MEDIUM 4.1 UPGRADE Nextcloud Mail is an email app for the Nextcloud home server platform
• CVE-2023-23944 LOW 2.0 UPGRADE Nextcloud mail is an email app for the nextcloud home server platform
• CVE-2023-23943 MEDIUM 5.0 UPGRADE Nextcloud mail is an email app for the nextcloud home server platform
• CVE-2021-39220 LOW 3.5 UPGRADE Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to version
• CVE-2021-32707 MEDIUM 4.3 UPGRADE Nextcloud Mail is a mail app for Nextcloud
• CVE-2021-32652 HIGH 8.8 UPGRADE Nextcloud Mail is a mail app for the Nextcloud platform
• CVE-2013-10001 MEDIUM 4.8 DOWNGRADE A vulnerability was found in HTC One/Sense 4.x

FAQ

How do I fix mail vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mail being exploited right now?

None of the tracked mail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mail CVE should I patch first?

CVE-2021-32652 currently ranks highest (52/100): Nextcloud Mail is a mail app for the Nextcloud platform.

RSS feed for mail · ← Back to latest CVEs